Need Make Site to Site VPN connection?

Question

Dear All,

I need make site to site VPN connection. I n each side i have one mb ADSL internet connection. Its IP address is dynamic. In both side i am using US Robotics 908 model router and windows small business server 2003. Presently in both side have Separate Separate LAN connection. So i need connect both this LAN by VPN. please help me how to make site to site VPN connection, what is the requirement for make this connection

Thanks and Regards,
Hafiz

Answer 1

First off, you'll need to switch to static IP addressing for your ADSL connections. VPNs will not reliably work with dynamic IP addresses. In fact, many VPN endpoint devices can only be configured with an IP address for the distant end; they don't support using FQDN so even using dynamic DNS won't help. Cisco PIX firewalls are an excellent example of that.

Once you've got the static IP sorted out, you'll need some sort of VPN endpoint device. The previously mentioned Cisco PIX firewall is an excellent choice. Configuration is a bit piggish but that can be said about most VPN configurations. It is doable by any IT person with reasonable network knowledge.

Another option if you are on a budget is IPCop. It's a free, open source firewall and VPN package that you install on an unused PC at each location. VPN setup is pretty easy as VPNs go and it will make connections to other VPN devices as well. Check it out at http://www.ipcop.org

If you will need "road warrior" support for travelers, stick wth the Cisco PIX. IPCop is a nasty bugger for road warrior connections; the PIX is fairly straight forward.

Lastly, make sure that the two networks are on different IP subnets internally. If one is using 192.168.0.0/24, the other MUST be on a different subnet such as 192.168.1.0/24. If they're using the same IP space, traffic can't flow between them.